Publications

(2024). SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions. In CCS Workshop on Cloud Computing Security.
(2024). FetchBPF: Customizable Prefetching Policies in Linux with eBPF. In USENIX Annual Technical Conference (ATC).
(2023). Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing. In SIGCOMM Workshop on eBPF and Kernel Extensions.
(2023). Securing Monolithic Kernels using Compartmentalization. Under review at ACM Computing Surveys.
(2021). Secure Namespaced Kernel Audit for Containers. In ACM Symposium on Cloud Computing (SoCC).